Cyber Security Operations Manager

**Purpose of the Job**:
**Primary Purpose**
The Security Operations Manager role is responsible for coordinating the IT organization's architecture, and technical activities to implement and manage Information security infrastructure, including incident response, system design reviews, security alert analysis, and to provide regular status and service-level reports to management.

**Job Objectives**:
Support program strategy and projects.
Identify security operations improvement opportunities and drive business security requirements across the organisation.
Coordinate treatment plans with affected stakeholders and communication with senior management.
Research, evaluate, design, test, recommend or plan the implementation of new or updated information security hardware or software, and analyse systems architecture and its impact on the existing environment; provide technical expertise for the administration of security tools.
Provide operational oversight for EDR and MSSP services.
Review ongoing operational controls and ensure alignment with security frameworks like MITRE ATT&CK and NIST.
Provide support and guidance for legal and regulatory compliance efforts, including audit.
Lead, mature, and maintain operational components of cybersecurity incident and response program.
Research, evaluate, design, test, recommend or plan the implementation of new or updated information security hardware or software, and analyse systems architecture and its impact on the existing environment; provide technical expertise for the administration of security tools.
Work with management to develop budget projections based on short
- and long-term goals and objectives.
Define metrics and reporting strategies that effectively communicate successes and progress of the security program.
Lead, mature, and maintain operational components of cybersecurity incident and response program.
Participate in the development, implementation, and maintenance of security procedures, and standards.
Assist in establishing and maintaining compliance with security policies, as well as the enforcement.
Manage enterprise cybersecurity technology needs, stakeholder relationships, and capability maturity.
Collaborate with others to drive enterprise-wide adoption of cybersecurity capabilities under their leadership.
Evaluate and prioritize strategic opportunities to enable technology organization to deliver on business priorities.
Proactively champion new opportunities for automation, innovation, and technical excellence within the cybersecurity organization, bringing thought leadership and deep technical expertise to drive adoption.
Own quarterly planning and roadmaps for cybersecurity capability.
Manage executive relationships to maintain strategic direction and pipeline of work.
Hold full accountability for success of designated function or department.
Drive performance against measurable functional, operational, and strategic priorities.
Prioritize work based on stakeholder needs and objectives and ensures the deployment of people, process, and technology resources is aligned to Cybersecurity strategy.
Provide technical leadership to manage planning, refinement, execution and review of critical initiatives.
Provide leadership to a large team, providing direction, motivation, and strategic oversight.
Supervise Team Leads.
Report to management on security matters (e.g., key IT security risks, progress on initiatives, etc).
Oversee the management of security incidents and implement remediations to mitigate vulnerabilities.

**Qualifications**:

- Bachelor's Degree in Cybersecurity, Computer Science, Information Systems, related field or equivalent training and/or experience.
- Cyber Security Certifications

**Experience**:
Minimum of 5 years' work experience with networking, intrusion detection/prevention systems (IDS/IPS), identity management, endpoint security, cloud access security brokers (CASB), security information event management (SIEM), data loss prevention (DLP), and encryption technologies.
5-10 years cybersecurity risk management and compliance experience.
5-10 years in managing, developing, implementing, and maintaining cybersecurity technologies, products, and operational processes.
Experience with Endpoint Detection & Response (EDR/XDR), automation (SOAR) and SIEM tools.
5 years - Progressive experience in cybersecurity or closely related field.
3 years - Related supervisory and/or lead experience.

**Knowledge and Skills**:
In-depth knowledge of modern security concepts such as common attack vectors, malware, security analytics and threat intelligence.
Understanding of Cybersecurity Operations models and technologies (cloud, automation, orchestration, analytics, and risk-based approaches).
Excellent understanding of major regulatory and industry standards such as NIST and MITRE ATT&ACK framework.
Stakeholder Management - Ability to create and maintain strong relationships with stakeholders in order to drive outcomes and create alignmen